CVE-2025-46783

creationtimestamp| type| source ---|---|--- 2025-06-13 08:34:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18283 2025-06-13 09:31:46+00:00| seen| Telegram/o1ZTzABdZN3OAzUP6RsYm0T2XzE-gKGKO27WNgsxHNfYZg 2025-06-13 12:13:44+00:00| seen|...

CVE-2025-22239

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvusbskwj2 2025-06-13 07:33:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18274 2025-06-13 07:34:25+00:00| seen|...

CVE-2025-45786

creationtimestamp| type| source ---|---|--- 2025-06-13 07:24:40+00:00| seen| https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11 2025-06-18 14:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18751 2025-06-18 15:31:20+00:00| published-proof-of-concept|...

CVE-2025-22241

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...

WordPress Color Palette plugin <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via hex Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via hex Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Color Palette versions = 4.3.2...

WordPress Telegram for WP plugin <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan in WordPress Plugin Telegram for WP versions = 1.6.1...

CVE-2025-5282

creationtimestamp| type| source ---|---|--- 2025-06-13 04:34:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18259 2025-06-13 05:25:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhp5tpg2a2k 2025-06-13 09:23:06+00:00| seen|...

CVE-2025-5841

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18251 2025-06-13 05:30:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhpgs6cax2s...

CVE-2025-5930

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18250 2025-06-13 05:15:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrholwrb6m2e...

CVE-2025-5928

creationtimestamp| type| source ---|---|--- 2025-06-13 02:33:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18244 2025-06-13 05:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhouvapcy2m...

Malicious code in react-expiry-date (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 744273ea7bca5335d9f20514a81c835c0cad1558b2b206721aed050a41f0acea Any computer that has this package installed or running should be considered...

MAL-2025-5051 Malicious code in react-expiry-date (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 744273ea7bca5335d9f20514a81c835c0cad1558b2b206721aed050a41f0acea Any computer that has this package installed or running should be considered...

openSUSE Security Advisory (SUSE-SU-2025:01889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:01884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:01878-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-86XF-2MGP-GV3G

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18218 2025-06-12 19:34:31+00:00| seen| Telegram/pmCQczjONs0GfJ4fUtzY9Rs7uNvrLwRQOu1OBXvD7CpRkk...

CVE-2025-49578

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578

Citizen is a MediaWiki skin. CVE-2025-49578 describes an XSS where date messages produced by Language::userDate are inserted into raw HTML, enabling stored XSS on wikis where a user has the editinterface right but not the editsitejs right. The issue affects Citizen versions prior to 3.3.1 and is ...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...